ATTACHMENT 3 - SSN_Request for Information - ACS Maintenance.pdf

Sources Sought Notice (SSN)_Request for Information (RFI)

For the Maintenance of the Acquisition Management Complex (AMC) Access Control System

1.0 Introduction and Purpose

The United States Government is issuing this Request for Information (RFI) to conduct market research and identify qualified vendors capable of providing comprehensive maintenance services for the Access Control System (ACS) at the Acquisition Management Complex (AMC).

The objective is to ensure the ongoing functionality, security, and compliance of the existing Genetec-based system. The information gathered from this RFI will be used to refine the requirements for a future solicitation, which is anticipated to be a Blanket Purchase Agreement (BPA) or an Indefinite Delivery, Indefinite Quantity (IDIQ) contract.

This is a Request for Information ONLY. It is not a solicitation for proposals, and the Government does not intend to award a contract on the basis of this RFI or to otherwise pay for the information submitted in response.

2.0 Background

The AMC utilizes a Genetec Security Center-Synergis system for its Physical Access Control System (PACS). The system infrastructure includes:

• System Coverage: 328 access-controlled doors and 79 monitored-only doors distributed across 14 buildings.

• Reader Hardware: Veridt Stealth Dual Contact/Contactless Keypad readers (Model

# SY-900W2036-OXYON).

• Controller Hardware: Synergis Cloudlink (Model # SY-CLOUDLINK), Mercury Intelligent Controllers (Model # SY-LP4502), and Mercury MR52 2-reader interface modules (Model # SY-MR52-S3).

The system must be maintained in compliance with federal regulations, including HSPD-12 and FIPS-201.

3.0 Scope of Services

The contractor will be responsible for providing all necessary maintenance to sustain the system, including but not limited to:

• Quarterly Preventive Maintenance (PM): Including system diagnostics, hardware testing, and software/firmware updates.

• Corrective Maintenance: Emergency, Urgent, and Routine service calls with defined response times.

• Parts and Equipment Replacement: Procuring and installing compatible replacement components as needed.

4.0 Information Requested

Interested parties are requested to provide concise responses to the following questions.

Please structure your response in the same order as the questions below.

Section A: Corporate Experience and Certification

1. Provide a brief overview of your company and its experience maintaining enterprise-level Access Control Systems, specifically Genetec Security Center-Synergis systems, for government or similarly sized commercial clients.

2. Describe two (2) projects of similar scope and complexity completed within the last three (3) years.

3. Confirm that your company can provide technicians who possess current and valid Genetec certifications for all work performed. Describe your process for maintaining personnel certifications.

Section B: Maintenance Approach and Capabilities

1. Describe your proposed methodology for conducting quarterly Preventive Maintenance as outlined in the PWS, including your process for managing and testing system software/firmware updates.

2. Explain your company's service model for providing tiered Corrective Maintenance.

How will you ensure that you can meet the specified response times (Emergency, Urgent, Routine)?

3. Describe your process for procuring and managing the replacement of parts and equipment to ensure compatibility and minimize downtime. What is your typical lead time for critical components like Mercury controllers or Veridt readers?

4. Describe your experience and proposed methods for providing secure remote diagnostics and support that comply with government cybersecurity controls (e.g., NIST standards).

Section C: Reporting and Contract Management

1. Provide a sample of a Preventive Maintenance Report and a Corrective Maintenance Log that your company has used on a previous project.

2. Describe your approach to managing a BPA or IDIQ contract with a Not-to-Exceed (NTE) ceiling, including your process for generating estimates and reconciling final invoices against service logs.